Privacy Policy

Last updated October 19, 2026

This page explains, in plain English, what information Permit Reports collects when you use permitreports.com and app.permitreports.com, what we do with it, and how to have it deleted. The short version: we collect what we need to run your subscription and improve the site, and we do not sell your personal information.

Who we are

Permit Reports LLC (“Permit Reports,” “we,” “us”) sells a monthly Excel file and an online dashboard of public building-permit records around Indianapolis. Noah runs it and answers privacy questions himself. Contact details are at the bottom of this page.

What we collect, and when

• When you start a free trial or subscribe: your email address and the plan you picked. Checkout runs on Stripe, our payment processor. If you add a card, Stripe collects it, plus any name and billing address it asks for. We never see or store your full card number. Stripe sends us your email, the plan, and whether your subscription is active.
• Your account: your email, a password stored only as a one-way scrambled hash (we cannot read it), and which reports you can open. When you sign in to app.permitreports.com, a sign-in token and a few display settings are kept in your browser’s storage so you stay signed in.
• Emails we send you: welcome, password-reset, and monthly report emails go out through Resend, our email delivery service, so your email address and the email itself pass through them.
• The monthly email list: if you sign up for it, we keep your email and which page you signed up from. Every email has an unsubscribe link.
• The “Questions? Ask me” chat: what you type, and the page you are on, are sent to our server and passed to an AI provider (Anthropic, or OpenAI as a backup) to write the reply. We do not save chat conversations in our database. The conversation is kept in your browser for that tab only, so it survives clicking to another page, and it is gone when you close the tab. Please don’t type anything sensitive into it.
• Calls, texts and emails to Noah: we keep what you send so we can answer it.
• Server logs: like most websites, our servers record basic request details such as your IP address and browser type. We use them for security, to stop abuse (for example, limiting how often a form can be sent), and to fix problems.

Analytics, session recording and ads

We use three outside tools on permitreports.com to understand how the site is used and to measure our ads:

• Plausible Analytics counts page views and button clicks (for example, “started a trial” or “tapped the phone number”). It does not use cookies and does not collect personal identifiers. The events we send never include your email, name, phone number or address.
• Microsoft Clarity records how visitors use our pages, including clicks, scrolling and mouse movement, and can play back a visit as a session recording so we can see where the site is confusing. It uses cookies. Microsoft’s handling of that data is described in the Microsoft Privacy Statement.
• Meta Pixel tells Meta (Facebook and Instagram) when you visit a page and when you click to start a trial, so we can measure our ads and show them to people likely to be interested. It uses cookies, and Meta may connect this to your Meta account. See Meta’s Privacy Policy and your Meta ad settings.

Cookies and browser storage

The cookies on our site come from Microsoft Clarity and Meta Pixel, described above. Our own pages do not set cookies; they keep two small things in your browser’s session storage: the chat conversation, and whether you closed the “Start 7-day free trial” bar. You can block or delete cookies in your browser settings, and most ad blockers stop Clarity and Meta Pixel. The site still works without them.

How we use your information

• To run your trial or subscription, deliver your reports, and handle billing.
• To send the emails you need (account, password reset, monthly report) and the monthly email list if you joined it.
• To answer your questions by chat, email, phone or text.
• To understand how the site is used, fix problems, and measure our ads.
• To prevent fraud and abuse, and to meet legal and tax obligations.

Who we share it with

We do not sell your personal information, and we do not share it for anyone else’s marketing. We share it only with the service providers that run the business for us, and only what each one needs:

• Stripe (payments and billing)
• Resend (sending email)
• Airtable (our customer and account records)
• Netlify and Railway (hosting the website and our server)
• Cloudflare (storing the report files)
• Anthropic and OpenAI (writing chat replies)
• Plausible, Microsoft Clarity and Meta (analytics and ads, as described above)

We may also share information if the law requires it, to protect our rights or someone’s safety, or as part of a sale or merger of the business, in which case this policy would still apply to your information.

About the permit data in our reports

Our reports are compiled from public building-permit records that cities and counties publish. They list the business that pulled each permit, the job address and the declared value. We leave property-owner names out of the reports. If you think a record about you or your company is wrong, or you want it reviewed, contact us and we will look at it.

How long we keep it

We keep your account and billing records while you are a customer, and afterwards as long as we need them for taxes, accounting, and resolving disputes. Email-list records are kept until you unsubscribe or ask us to delete them. Chat conversations are not stored by us.

Your choices: access, correction and deletion

You can ask us at any time to show you the personal information we hold about you, correct it, or delete it. Email noah@permitreports.com or call or text Noah at (317) 937-8162 and say what you want. We will answer within 30 days. We may keep a minimal record where the law requires it (for example, past invoices). To stop marketing email, use the unsubscribe link in any email. To cancel a subscription, see our Terms of Service.

Security

Payments are handled by Stripe, passwords are stored only as one-way hashes, and the site and app are served over encrypted HTTPS connections. No system is perfectly secure, but we limit who can reach your information and what each service provider gets.

Children

Permit Reports is a service for businesses. It is not meant for children, and we do not knowingly collect information from anyone under 13.

Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top. If a change is significant, we will email current customers.

Contact